diff --git a/.github/workflows/first-responder-docs-content.yml b/.github/workflows/first-responder-docs-content.yml
index 703f8af84bfb..508649707fec 100644
--- a/.github/workflows/first-responder-docs-content.yml
+++ b/.github/workflows/first-responder-docs-content.yml
@@ -14,7 +14,7 @@ on:
       - unlabeled
 
 permissions:
-  contents: none
+  contents: read
 
 jobs:
   first-responder-triage-pr:
diff --git a/.github/workflows/repo-sync-stalls.yml b/.github/workflows/repo-sync-stalls.yml
index 8421ba9b458c..17d153230ba9 100644
--- a/.github/workflows/repo-sync-stalls.yml
+++ b/.github/workflows/repo-sync-stalls.yml
@@ -10,6 +10,7 @@ on:
     - cron: '20 */2 * * *' # Run every 2nd hour at 20 minutes after
 
 permissions:
+  contents: read
   pull-requests: read
 
 jobs: